Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/fd2daf56-266c-3ec4-9625-dabc95577e05.roa
File:                     fd2daf56-266c-3ec4-9625-dabc95577e05.roa (raw, json)
Hash identifier:          o1LTxDW7tp8l74U8Y0mFb8GObcsGTMSxJ0LgVbNQ6zI=
Subject key identifier:   7C:C6:E7:DD:06:D4:51:B0:24:5A:86:8A:B5:0B:80:3E:10:AA:07:9F
Certificate issuer:       /CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
Certificate serial:       010D0C9F432858469D66527832AEE3D37BF47B80
Authority key identifier: B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/fd2daf56-266c-3ec4-9625-dabc95577e05.roa
Signing time:             Sun 21 Jul 2024 19:41:05 +0000
ROA not before:           Sun 21 Jul 2024 19:41:05 +0000
ROA not after:            Sat 19 Oct 2024 19:41:05 +0000
asID:                     214995
IP address blocks:        23.184.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 02:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9d:66:52:78:32:ae:e3:d3:7b:f4:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
        Validity
            Not Before: Jul 21 19:41:05 2024 GMT
            Not After : Oct 19 19:41:05 2024 GMT
        Subject: CN=dd9f977a-9180-4d0f-ab04-740df207e58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:0e:3b:00:32:c4:0d:78:2a:04:f0:b6:b0:
                    eb:b1:a9:5d:06:f4:d9:eb:3e:47:71:65:a0:e9:29:
                    a9:db:dc:71:b2:33:16:f8:23:bb:90:69:d7:0b:8e:
                    e7:c2:65:4c:ed:04:c7:c2:fc:8e:68:53:09:47:22:
                    a3:e8:49:9d:90:7e:6e:5b:ba:2e:2b:2c:e0:ff:aa:
                    c6:22:c6:f9:da:85:2a:6d:56:ef:c1:39:ee:e4:7e:
                    45:0c:2c:98:7c:02:58:9d:ec:da:36:7b:71:f6:0e:
                    7d:e3:f5:1e:dd:a8:f1:a1:f7:ef:0d:70:60:f3:90:
                    1c:21:f3:cc:a5:56:b4:b4:fb:df:34:aa:d4:ce:fc:
                    71:6c:5a:68:82:55:fa:33:4b:54:69:74:44:69:9a:
                    ec:ec:25:00:d8:f7:84:21:5c:db:e2:d8:d5:05:1f:
                    74:51:0b:ae:6d:11:ac:a0:4d:21:e9:66:30:73:ec:
                    aa:6a:cd:85:ee:dc:eb:9a:cd:91:a5:60:e8:f1:f7:
                    85:a9:c3:c1:c3:10:ba:11:39:1e:44:46:73:d8:23:
                    37:5a:51:f9:6c:9e:3d:10:ee:ea:27:f1:2a:a4:20:
                    fd:fd:6c:73:08:8a:68:b1:24:49:af:cd:62:de:d5:
                    5d:76:54:fb:1f:e7:26:48:c1:27:ca:e9:17:d6:7c:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C6:E7:DD:06:D4:51:B0:24:5A:86:8A:B5:0B:80:3E:10:AA:07:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/fd2daf56-266c-3ec4-9625-dabc95577e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.crl

            X509v3 Authority Key Identifier:
                keyid:B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:86:87:55:46:fd:e0:39:82:e0:fe:dc:16:15:92:05:fc:
         0c:7b:fb:dc:07:e5:46:d5:8b:4f:bd:ca:8e:2b:53:c9:62:98:
         30:af:94:5b:81:83:29:05:44:e3:8d:49:e5:a2:42:f8:b0:dd:
         70:3f:c8:26:ca:4a:11:e9:61:45:7e:e9:d7:4e:83:cd:04:49:
         a5:7b:5f:e1:9c:35:61:19:b8:58:22:1a:d4:59:3f:9d:32:38:
         31:88:ce:60:02:09:6e:95:59:95:35:4b:4d:34:70:2e:4c:09:
         a2:95:e3:93:84:c2:20:35:93:ca:de:f1:54:14:7b:75:f1:7c:
         b4:98:db:f8:37:7f:15:9d:d9:c3:60:07:94:1f:67:98:0e:8f:
         95:e9:18:4b:92:e7:a5:8a:24:49:76:3e:de:65:fa:fc:5d:c6:
         9c:95:05:ae:72:b8:29:73:51:d4:14:74:f6:fc:54:b5:b6:f6:
         df:1d:2d:67:e4:ef:ed:26:e1:1b:a2:6f:c2:20:a0:ef:ad:1d:
         c9:89:eb:6b:09:14:e9:30:ec:74:65:aa:3e:a0:e8:4b:62:03:
         bf:18:3d:08:a7:f2:97:75:46:ad:7b:6d:c4:00:3c:fe:47:67:
         f7:46:40:06:b7:d5:28:c6:3a:6c:5b:14:fa:ee:ed:b2:ec:7b:
         f2:69:ab:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEadZlJ4Mq7j03v0e4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwZDg2NjAtMDliZi00NjY2LTljZDktMmE1M2JkMTJm
ZGZkMB4XDTI0MDcyMTE5NDEwNVoXDTI0MTAxOTE5NDEwNVowLzEtMCsGA1UEAxMk
ZGQ5Zjk3N2EtOTE4MC00ZDBmLWFiMDQtNzQwZGYyMDdlNThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0gOOwAyxA14KgTwtrDrsaldBvTZ6z5HcWWg
6Smp29xxsjMW+CO7kGnXC47nwmVM7QTHwvyOaFMJRyKj6EmdkH5uW7ouKyzg/6rG
Isb52oUqbVbvwTnu5H5FDCyYfAJYnezaNntx9g594/Ue3ajxoffvDXBg85AcIfPM
pVa0tPvfNKrUzvxxbFpoglX6M0tUaXREaZrs7CUA2PeEIVzb4tjVBR90UQuubRGs
oE0h6WYwc+yqas2F7tzrms2RpWDo8feFqcPBwxC6ETkeREZz2CM3WlH5bJ49EO7q
J/EqpCD9/WxzCIposSRJr81i3tVddlT7H+cmSMEnyukX1nyGLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzG590G1FGwJFqGirULgD4QqgefMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTBk
ODY2MC0wOWJmLTQ2NjYtOWNkOS0yYTUzYmQxMmZkZmQvZmQyZGFmNTYtMjY2Yy0z
ZWM0LTk2MjUtZGFiYzk1NTc3ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwZDg2NjAtMDliZi00NjY2LTlj
ZDktMmE1M2JkMTJmZGZkLzBlMGQ4NjYwLTA5YmYtNDY2Ni05Y2Q5LTJhNTNiZDEy
ZmRmZC5jcmwwHwYDVR0jBBgwFoAUtQr6m+dNcE49AbYl46pGfYkemfYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wZTBkODY2MC0wOWJmLTQ2NjYtOWNkOS0yYTUz
YmQxMmZkZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7g4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtRhodVRv3gOYLg/twWFZIF/Ax7+9wH5UbVi0+9yo4rU8limDCvlFuB
gykFROONSeWiQviw3XA/yCbKShHpYUV+6ddOg80ESaV7X+GcNWEZuFgiGtRZP50y
ODGIzmACCW6VWZU1S000cC5MCaKV45OEwiA1k8re8VQUe3XxfLSY2/g3fxWd2cNg
B5QfZ5gOj5XpGEuS56WKJEl2Pt5l+vxdxpyVBa5yuClzUdQUdPb8VLW29t8dLWfk
7+0m4Ruib8IgoO+tHcmJ62sJFOkw7HRlqj6g6EtiA78YPQin8pd1Rq17bcQAPP5H
Z/dGQAa31SjGOmxbFPru7bLse/Jpq2o=
-----END CERTIFICATE-----